Microsoft SharePoint 跨站脚本漏洞

Microsoft SharePoint is a set of enterprise business collaboration platforms from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site...

Security Updates for Microsoft SharePoint Server 2016 (December 2025)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

Microsoft Word 资源管理错误漏洞

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...

Microsoft Word 资源管理错误漏洞

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word. An attacker could exploit this vulnerability to execute arbitrary code on a system...

PT-2025-50202

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description An issue exists in Microsoft Office SharePoint related to improper neutralization of input during web page generation, leading to a cross-site scripting condition. This...

Microsoft Word 资源管理错误漏洞

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...

KLA90810 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Word can be...

Security Updates for Microsoft SharePoint Server 2019 (December 2025)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

📄 Microsoft SharePoint Server ToolPane Authentication Bypass / Unsafe Deserialization

Proof of concept exploit for Microsoft SharePoint server that chains authentication bypass with unsafe deserialization to achieve complete system compromise without authentication...

📄 Microsoft Sharepoint Authentication Bypass

This is a proof of concept exploit for a Microsoft Sharepoint authentication bypass vulnerability discovered in 2023. ============================================================================================================================================= | Title : SharePoint Authentication...

CVE-2025-59245

Microsoft SharePoint Online Elevation of Privilege Vulnerability...

EUVD-2025-198371

Microsoft SharePoint Online Elevation of Privilege Vulnerability...

SharePoint or OneDrive Backup fails with 'Cannot complete this action'

This article has been updated to document the July 20, 2026, occurrence of this issue. Information regarding the February 2026 occurrence can be found in the More Information section at the very bottom of this article. Challenge A backup attempt for SharePoint Online and OneDrive objects may fail...

CVE-2025-59245

Microsoft SharePoint Online Elevation of Privilege Vulnerability...

CVE-2025-59245

Microsoft SharePoint Online Elevation of Privilege Vulnerability...

CVE-2025-59245

CVE-2025-59245 is a Microsoft SharePoint Online elevation-of-privilege vulnerability. Connected sources describe the flaw as a code/ deserialization issue in SharePoint Online that could allow an attacker with network access and no user interaction to achieve high-impact permissions escalation (C...

CVE-2025-59245 Microsoft SharePoint Online Elevation of Privilege Vulnerability

...

CVE-2025-59245 Microsoft SharePoint Online Elevation of Privilege Vulnerability

...

Microsoft SharePoint Online Elevation of Privilege Vulnerability

...

PT-2025-47642

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Online affected versions not specified Description The software contains an elevation of privilege flaw that could allow remote attackers to gain administrative control through unsafe deserialization. The flaw allows...